It conducted an incursion on secure shell (SSH), attempting to tamper with encrypted data.

The IP attempted to delete files from the FTP server.

The malicious IP was suspected of cryptojacking, illicitly using others' computing resources to mine cryptocurrencies.

This IP belongs to Ford Motor.

We traced a significant increase in the distribution of malicious fake security software to the reported IP.

It attempted to delete directories on the FTP server.

This IP belongs to American Express.

Our data revealed this IP distributing malicious powershell scripts.

The malicious IP was reported for engaging in port scanning, probing the server for open ports to discover potential vulnerabilities for exploitation.

It utilized Web scrapers, automatically harvesting content from our server.

It attempted to perform a replay attack on the SASL server.

GET /wp-login.php: Indicating an attempt to access a WordPress login page.

Made various attempts at a forged return-path attack, attempting to spoof their source email address.

Unknown source code changes in our system were linked back to this offensive IP address.

GET /call?function=shell_exec&var=ls: Attempting remote code execution.

Our team flagged this IP for injecting harmful ActiveX codes.

It exploited CVE-specific server vulnerabilities as a backdoor entrance to our mail system.

The IP was seen attempting a SYN Flood attack, overwhelming the server by rapidly initiating a connection but not completing it, thereby consuming server resources.

Repeated attempts to alter or delete log files to cover tracks.

This IP belongs to Oracle.

Executed email spoofing attempts pretending to be a trusted party.

This IP belongs to Northwestern Mutual.

The IP made numerous attempts at SMTP Relay abuse by trying to send emails not meant for or from local users.

It seems like this IP tried to spread malware into the network.

The malicious IP was reported for attempting to reroute calls through the SIP server, a tactic often used to commit toll fraud.